<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:wfw="http://wellformedweb.org/CommentAPI/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
	>

<channel>
	<title>411 on Spyware &#187; Spyware</title>
	<atom:link href="http://www.411-spyware.com/remove/spyware/feed" rel="self" type="application/rss+xml" />
	<link>http://www.411-spyware.com</link>
	<description>411-Spyware.com</description>
	<lastBuildDate>Fri, 20 Nov 2009 02:05:11 +0000</lastBuildDate>
	<generator>http://wordpress.org/?v=2.8.5</generator>
	<language>en</language>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
			<item>
		<title>ObamaStimulusProgram.com</title>
		<link>http://www.411-spyware.com/obamastimulusprogram-com</link>
		<comments>http://www.411-spyware.com/obamastimulusprogram-com#comments</comments>
		<pubDate>Tue, 20 Jan 2009 23:39:29 +0000</pubDate>
		<dc:creator>Kristopher</dc:creator>
				<category><![CDATA[Spyware]]></category>
		<category><![CDATA[Obama Scam Site]]></category>
		<category><![CDATA[Obama Stimulus Program site]]></category>
		<category><![CDATA[ObamaStimulusProgram com popup]]></category>
		<category><![CDATA[ObamaStimulusProgram.com]]></category>

		<guid isPermaLink="false">http://www.411-spyware.com/?p=3390</guid>
		<description><![CDATA[<a href="http://www.411-spyware.com/images/ObamaStimulusProgram.com.gif" title="ObamaStimulusProgram.com screenshot" rel="lightbox"><img src="http://www.411-spyware.com/images/ObamaStimulusProgram.com.gif" class="alignleft" alt="ObamaStimulusProgram.com screenshot" longdesc="Click to zoom on ObamaStimulusProgram.com screenshot" /></a><strong>ObamaStimulusProgram.com</strong> is a site dedicated to educating you on Obama's stimulus plan and getting free government grants.

That, and scamming you out of $2.95 shipping and handling, plus a possible $89 per month.

When you land on ObamaStimulusProgram.com, you'll see a slick home page encouraging you to take advantage of Obama's stimulus plan, and get free government grants.  Click through, and you'll hit a high-pressure page asking you for personal details, such as your income and age. Once you give ObamaStimulusProgram.com that information, you'll magically qualify for government grants.  All you need to do is give ObamaStimulusProgram.com your credit card information, to cover shipping and handling costs. 

But before you do so, you may want to check out <a title="ObamaStimulusProgram.com terms and conditions" href="https://secure.securesiteorders.com/ezgrantpro/terms.php">ObamaStimulusProgram.com's terms</a>: 
<blockquote>Upon submitting a request for a Grant Kit, a Member ID and Password are assigned to you and can be used to gain access to Lead Source Services Grant website. The initial shipping &#038; handling charge of $3.95 includes the Lead Source Services Grant tool Kit as well as ten (10) days worth of access to the online directories and training. <em>After 10 days, you will automatically be billed the $89.61 recurring monthly fee for the Lead Source Services Grant membership.</em></blockquote>

Did that make you nervous?  Click your button's back browser, and you get a ObamaStimulusProgram.com  popup:
<blockquote>Are you sure you want to navigate away from this page? Please click  'CANCEL'  now to stay and claim your special offer. Press OK to continue, or Cancel to stay on the current page.</blockquote>

Instead of clicking "OK" or "CANCEL," click your browser window close -- as usual, if you want to get information about a particular company's or organization's offers, type their official site into your browser instead of clicking through random emails.

Yes, we can -- avoid scam websites.]]></description>
		<wfw:commentRss>http://www.411-spyware.com/obamastimulusprogram-com/feed</wfw:commentRss>
		<slash:comments>7</slash:comments>
		</item>
		<item>
		<title>StartedWebsite.com/security/xp/</title>
		<link>http://www.411-spyware.com/httpstartedwebsite-com-security-xp</link>
		<comments>http://www.411-spyware.com/httpstartedwebsite-com-security-xp#comments</comments>
		<pubDate>Tue, 04 Nov 2008 20:41:54 +0000</pubDate>
		<dc:creator>Kristopher</dc:creator>
				<category><![CDATA[Spyware]]></category>

		<guid isPermaLink="false">http://www.411-spyware.com/?p=2650</guid>
		<description><![CDATA[<small><strong>StartedWebsite.com/security/xp/ Threat Level:</strong></small> <img src="/images/post_level2.png" alt="StartedWebsite.com/security/xp/ is a pest" style="margin-right: 10px; vertical-align: middle; border: 0;" />

<a href="http://www.411-spyware.com/images/homesiteurls-com-security-xp.gif" title="StartedWebsite.com/security/xp/ screenshot" rel="lightbox"><img src="http://www.411-spyware.com/images/homesiteurls-com-security-xp.gif" class="alignleft" alt="StartedWebsite.com/security/xp/ screenshot" longdesc="Click to zoom on StartedWebsite.com/security/xp/ screenshot" /></a> <strong>StartedWebsite.com/security/xp/</strong>  is a fake anti-spyware browser hijacker.  You could be browsing the web, and out of nowhere a StartedWebsite.com/security/xp/ popup appears:
<blockquote>"<strong>The page at http://www.StartedWebsite.com/security/xp/ says:</strong>
Warning!
W32.Myzor.FK@yf is a virus that infects files with .exe extensions. It attempts to steal passwords
and private information from the infected computer.
<strong>Type:    </strong>              	      Virus
<strong>Infection Length: </strong>	      138,293 bytes
<strong>Systems Affected: </strong>	      Windows 95, 98, ME, NT (all versions), 2003, Windows XP (all service packs)
<strong>Systems Not Affected: </strong> DOS, EPOC, Linux, Macintosh, Novell Netware, OS/2, UNIX
<strong>Technical details:	</strong>      1. Creates files in %Windir%\ directory. By default, this is C:\Windows.
		      2. Adds values to registry keys:
		      HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run
		      3. Scans the hard drive for .exe files and infects any executable files.
		      Searches for passwords/information, which it may send to a remote attacker.
Recomendations:	      Click "OK" to download officially approved security software.
		      Always keep your patch levels up-to-date.</blockquote>

If you click "OK," Windows Antivirus 2008 (AKA: Win Antivirus 2008) will be downloaded. Clicking "Cancel" moves you on a page promoting <a title="StartedWebsite.com/security/xp/ " href="http://www.411-spyware.com/remove-win-antivirus-2008">Windows Antivirus 2008</a> and <a title="StartedWebsite.com/security/xp/ " href="http://www.411-spyware.com/remove-ultimate-antivirus-2008">Ultimate Antivirus</a>.

If your computer keeps going to  StartedWebsite.com/security/xp/, weâ€™ll show you how to block StartedWebsite.com/security/xp/ for free.]]></description>
		<wfw:commentRss>http://www.411-spyware.com/httpstartedwebsite-com-security-xp/feed</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>MicroAntiVir2009.com</title>
		<link>http://www.411-spyware.com/microantivir2009-com</link>
		<comments>http://www.411-spyware.com/microantivir2009-com#comments</comments>
		<pubDate>Sun, 28 Sep 2008 03:58:05 +0000</pubDate>
		<dc:creator>Graham</dc:creator>
				<category><![CDATA[Browser Hijackers]]></category>
		<category><![CDATA[Fake Antispyware]]></category>
		<category><![CDATA[Spyware]]></category>

		<guid isPermaLink="false">http://www.411-spyware.com/?p=1883</guid>
		<description><![CDATA[<small><strong>MicroAntiVir2009.com Threat Level:</strong></small> <img src="/images/post_level2.png" alt="MicroAntiVir2009.com is a pest" style="margin-right: 10px; vertical-align: middle; border: 0;" />

<a href="http://www.411-spyware.com/images/microantivir2009-com.gif" title="MicroAntiVir2009.com  screenshot" rel="lightbox"><img src="http://www.411-spyware.com/images/microantivir2009-com.gif" title="MicroAntiVir2009.com Screen Shot" longdesc="rogue anti spyware MicroAntiVir2009.com screenshot close up" alt="MicroAntiVir2009.com screenshot" class="alignleft" /></a>  <strong>MicroAntiVir2009.com</strong> is a rogue website that promotes  fake antivirus software.  Even though MicroAntiVir2009.com doesn't seem to be sure which scam-ware it's promoting -- MicroAntiVir2009.com mentions three different fake antivirus names on its home page alone -- MicroAntivirus 2009 is the only fake antivirus MicroAntiVir2009.com wants to infect your PC with.  

MicroAntivirus 2009 has a bit of an identity crisis, too -- instead of actually looking for viruses, it generates fake security alerts every minute to trick you into paying $34.95 -$99.95 for the "full" version.  Given how messed up MicroAntiVir2009.com is, you'll most likely be charged $99.95, no matter what option you choose.

If MicroAntivirus 2009 is an unwanted guest on your computer, we'll show you <a title="How to remove MicroAntivirus 2009" href="http://www.411-spyware.com/remove-micro-antivirus-2009">how to remove MicroAntivirus 2009</a> and block MicroAntiVir2009.com for free.]]></description>
		<wfw:commentRss>http://www.411-spyware.com/microantivir2009-com/feed</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Q. I Bought a Legitimate Antivirus, But It Won&#8217;t Remove the Infection</title>
		<link>http://www.411-spyware.com/q-i-bought-a-legitimate-antivirus-but-it-wont-remove-the-infection</link>
		<comments>http://www.411-spyware.com/q-i-bought-a-legitimate-antivirus-but-it-wont-remove-the-infection#comments</comments>
		<pubDate>Sat, 27 Sep 2008 03:40:24 +0000</pubDate>
		<dc:creator>Graham</dc:creator>
				<category><![CDATA[Fake Antispyware]]></category>
		<category><![CDATA[Spyware]]></category>

		<guid isPermaLink="false">http://www.411-spyware.com/?p=1913</guid>
		<description><![CDATA[<small><strong>Q. I Bought a Legitimate Antivirus, But It Won&#8217;t Remove the Infection Threat Level:</strong></small> <img src="/images/post_level1.png" alt="Q. I Bought a Legitimate Antivirus, But It Won&#8217;t Remove the Infection is a pest" style="margin-right: 10px; vertical-align: middle; border: 0;" />

<strong><em>Q. I'm infected with a stubborn worm/virus/fake antispyware program. I bought </em>Legitimate Antivirus/Anti-Spyware XYZ<em> and itâ€™s not solving the problem. A little help please! </em></strong>

I often see this asked in comments on 411-Spyware.  Iâ€™m glad people come to us for for help, but there's someone else they should be asking first -- their antivirus/anti-spyware software support team.

If you paid for the software and itâ€™s not removing the infection, itâ€™s not doing its job.   Free customer support should have been part of the package when you bought it, so find the software company's email address and/or phone number and tell them of your problem. Antivirus/anti-spyware companies want you to renew your license when it expires, so they should be more than happy to help you remove the infection.

Please note that products like AVG Free and Spyware Doctor Starter Edition don't have customer support.   Thatâ€™s the price you pay for not paying in the first place.

While you're waiting for a reply from the antivirus/anti-spyware company's support team, make sure your software is up to date, and run the program again.  If the infection is getting in the way of you doing this,  reboot your computer and hold down the F8 key. When the option appears, choose â€œSafe mode with Networking." Once you're in safe mode, update and scan from there if the software lets you.

Good luck!]]></description>
		<wfw:commentRss>http://www.411-spyware.com/q-i-bought-a-legitimate-antivirus-but-it-wont-remove-the-infection/feed</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Trojan-IM.Win32.Faker.a</title>
		<link>http://www.411-spyware.com/trojan-im-win32-faker-a</link>
		<comments>http://www.411-spyware.com/trojan-im-win32-faker-a#comments</comments>
		<pubDate>Fri, 26 Sep 2008 00:34:58 +0000</pubDate>
		<dc:creator>Graham</dc:creator>
				<category><![CDATA[Spyware]]></category>
		<category><![CDATA[Trojans]]></category>

		<guid isPermaLink="false">http://www.411-spyware.com/?p=1818</guid>
		<description><![CDATA[<small><strong>Trojan-IM.Win32.Faker.a Threat Level:</strong></small> <img src="/images/post_level3.png" alt="Trojan-IM.Win32.Faker.a is a pest" style="margin-right: 10px; vertical-align: middle; border: 0;" />

<a href="http://www.411-spyware.com/images/Trojan-IM-Win32-Faker-a.gif" title="Trojan-IM.Win32.Faker.a screenshot" rel="lightbox"><img src="http://www.411-spyware.com/images/Trojan-IM-Win32-Faker-a.gif" class="alignleft" alt="Trojan-IM.Win32.Faker.a screenshot" longdesc="Click to zoom on Trojan-IM.Win32.Faker.a screenshot" /></a> <strong>Trojan-IM.Win32.Faker.a</strong> is a real Trojan and a fake threat that appears in popups and desktop warnings by fake antispyware and rogue sites.  

Is Trojan-IM.Win32.Faker.a dangerous?  Trojan-IM.Win32.Faker.a was a serious threat, once upon a time -- Trojan-IM.Win32.Faker.a would steal MSN Messenger passwords by generating a fake MSN Messenger "enter password" screen. Now, Trojan-IM.Win32.Faker.a's biggest danger is scaring you into wasting money on fake anti-spyware like <a title="Trojan-IM.Win32.Faker.a  is related to Internet Antivirus"  href="http://www.411-spyware.com/remove-internet-antivirus">Internet Antivirus</a>, by using tricks such as changing your screensaver and desktop to tell you that your computer is infected with spyware. 

You're probably not really infected with Trojan-IM.Win32.Faker.a -- you're infected with scamware that you need to remove. 

I'll show you how to get rid of Trojan-IM.Win32.Faker.a for free.]]></description>
		<wfw:commentRss>http://www.411-spyware.com/trojan-im-win32-faker-a/feed</wfw:commentRss>
		<slash:comments>2</slash:comments>
		</item>
		<item>
		<title>A-VXP08.net</title>
		<link>http://www.411-spyware.com/a-vxp08-net</link>
		<comments>http://www.411-spyware.com/a-vxp08-net#comments</comments>
		<pubDate>Wed, 24 Sep 2008 04:49:56 +0000</pubDate>
		<dc:creator>Graham</dc:creator>
				<category><![CDATA[Browser Hijackers]]></category>
		<category><![CDATA[Fake Antispyware]]></category>
		<category><![CDATA[Spyware]]></category>

		<guid isPermaLink="false">http://www.411-spyware.com/?p=1754</guid>
		<description><![CDATA[<small><strong>A-VXP08.net Threat Level:</strong></small> <img src="/images/post_level2.png" alt="A-VXP08.net is a pest" style="margin-right: 10px; vertical-align: middle; border: 0;" />

<a href="http://www.411-spyware.com/images/Anti-Virus-XP.com.gif" title="A-VXP08.net screenshot" rel="lightbox"><img src="http://www.411-spyware.com/images/Anti-Virus-XP.com.gif" class="alignleft" alt="A-VXP08.net screenshot" longdesc="Click to zoom on A-VXP08.net screenshot" /></a><strong>A-VXP08.net</strong> is home to Antivirus XP 2008, yet another fake anti-spyware application. 

A-VXP08.net says Antivirus XP 2008 is "ultramodern software."  I'm not sure how they define "ultramodern software," but all you'll get from Antivirus XP 2008 are false positives and fake security popups telling you to buy the non-existent "full" version. 

If you're sick of A-VXP08.net's "ultramodern" scamware, I'll show you <a href="http://www.411-spyware.com/remove-antivirus-xp-2008" title="How to remove Antivirus XP 2008">how to remove Antivirus XP 2008 for free</a>. ]]></description>
		<wfw:commentRss>http://www.411-spyware.com/a-vxp08-net/feed</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>SecureClick1.com</title>
		<link>http://www.411-spyware.com/secureclick1-com</link>
		<comments>http://www.411-spyware.com/secureclick1-com#comments</comments>
		<pubDate>Wed, 24 Sep 2008 04:44:35 +0000</pubDate>
		<dc:creator>Graham</dc:creator>
				<category><![CDATA[Browser Hijackers]]></category>
		<category><![CDATA[Fake Antispyware]]></category>
		<category><![CDATA[Spyware]]></category>

		<guid isPermaLink="false">http://www.411-spyware.com/?p=1723</guid>
		<description><![CDATA[<small><strong>SecureClick1.com Threat Level:</strong></small> <img src="/images/post_level2.png" alt="SecureClick1.com is a pest" style="margin-right: 10px; vertical-align: middle; border: 0;" />

<a href="http://www.411-spyware.com/images/secureclick1-com.gif" title="SecureClick1.com screenshot" rel="lightbox"><img src="http://www.411-spyware.com/images/secureclick1-com.gif" class="alignleft" alt="SecureClick1.com screenshot" longdesc="Click to zoom on SecureClick1.com screenshot" /></a><strong>SecureClick1.com</strong> is home to Antivirus 2009 Protect, AKA Antivirus 2009, one of many fake anti-spyware applications.

SecureClick1.com states that Antivirus 2009 Protection comes with a money-back guarantee. Don't be fooled by this.  After the scammers have your money, you will never hear from them again and SecureClick1.com will continue to give you false positives and fake security popups telling you to buy the non-existent "full" version. 

If you don't remember how you got to SecureClick1.com, don't believe SecureClick1.com's scare tactics -- you're probably just infected with Antivirus 2009. 

I'll show you how to block SecureClick1.com and <a title="SecureClick1.com " href="http://www.411-spyware.com/remove-antivirus2009">remove Antivirus2009 for free</a>.  ]]></description>
		<wfw:commentRss>http://www.411-spyware.com/secureclick1-com/feed</wfw:commentRss>
		<slash:comments>2</slash:comments>
		</item>
		<item>
		<title>Q. I bought fake antispyware. How do I get my money back?</title>
		<link>http://www.411-spyware.com/how-to-get-a-rogue-antispyware-refund</link>
		<comments>http://www.411-spyware.com/how-to-get-a-rogue-antispyware-refund#comments</comments>
		<pubDate>Tue, 23 Sep 2008 00:05:52 +0000</pubDate>
		<dc:creator>Graham</dc:creator>
				<category><![CDATA[Fake Antispyware]]></category>
		<category><![CDATA[Spyware]]></category>

		<guid isPermaLink="false">http://www.411-spyware.com/?p=1641</guid>
		<description><![CDATA[<small><strong>Q. I bought fake antispyware. How do I get my money back? Threat Level:</strong></small> <img src="/images/post_level2.png" alt="Q. I bought fake antispyware. How do I get my money back? is a pest" style="margin-right: 10px; vertical-align: middle; border: 0;" />

<strong><em>"Q. I bought </em>Rogue Program X<em> and now I can't find any way of accessing this program. All the links that they gave me to click on just brings up a blank screen. I've even tried to find their support site and my computer tells me that there is no such site. I have contacted </em>Rogue Program X<em> for a refund but I have not heard back from them.</em></strong>

It's tragic reading comments like these on 411-Spyware.com,  because every person who pays for a fake antivirus or rogue anti-spyware program gives the makers more incentive to make more scam-ware.  Fake antispyware is a scam, and there's no full version of a fake antivirus, despite what all the pop ups you get hammered with say.  All you're doing is giving the scammers your money, and I'm sad to day there is very little chance you'll get your money back. 

Unfortunately these scams are run from foreign countries where the law is lax, so it's unlikely that your countries law can help you.

The one action you can and must take as soon as possible is contacting your credit card company and bank to prevent the scammers from using your credit card for other purchases.]]></description>
		<wfw:commentRss>http://www.411-spyware.com/how-to-get-a-rogue-antispyware-refund/feed</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Scanner.Microantivirus-2009.com</title>
		<link>http://www.411-spyware.com/scanner-microantivirus-2009-com</link>
		<comments>http://www.411-spyware.com/scanner-microantivirus-2009-com#comments</comments>
		<pubDate>Tue, 23 Sep 2008 00:00:53 +0000</pubDate>
		<dc:creator>Graham</dc:creator>
				<category><![CDATA[Browser Hijackers]]></category>
		<category><![CDATA[Fake Antispyware]]></category>
		<category><![CDATA[Spyware]]></category>

		<guid isPermaLink="false">http://www.411-spyware.com/?p=1678</guid>
		<description><![CDATA[<a href="#level2"><small><strong>Scanner.Microantivirus-2009.com Threat Level:</strong></small></a> <img src="/images/post_level2.png" alt="Scanner.Microantivirus-2009.com is a pest" style="margin-right: 10px; vertical-align: middle; border: 0;" />

<strong>Scanner.Microantivirus-2009.com</strong> is a website promoting Micro Antivirus 2009, a <a href="#rogueantispyware" title="Scanner.Microantivirus-2009.com is related to fake anti-spyware">fake anti-spyware</a> application. 

At the time of writing, the FireFox web browser is showing a warning that Scanner.Microantivirus-2009.com is an "Attack Site" and even if you ignore that, the website itself is not working.  The scammers could change Scanner.Microantivirus-2009.com so that Micro Antivirus automatically downloads onto your PC. Because of this it's best to block Scanner.Microantivirus-2009.com

If you've been infected with Micro Antivirus 2009, either from Scanner.Microantivirus-2009.com or elsewhere, we'll show you <a title="Scanner.Microantivirus-2009.com is related to MS Antivirus 2008" href="http://www.411-spyware.com/remove-micro-antivirus-2009">how to remove Micro Antivirus 2009 for free</a>.
]]></description>
		<wfw:commentRss>http://www.411-spyware.com/scanner-microantivirus-2009-com/feed</wfw:commentRss>
		<slash:comments>1</slash:comments>
		</item>
		<item>
		<title>BestAntivirusScan.com</title>
		<link>http://www.411-spyware.com/bestantivirusscan-com-2</link>
		<comments>http://www.411-spyware.com/bestantivirusscan-com-2#comments</comments>
		<pubDate>Mon, 22 Sep 2008 21:50:36 +0000</pubDate>
		<dc:creator>Graham</dc:creator>
				<category><![CDATA[Browser Hijackers]]></category>
		<category><![CDATA[Fake Antispyware]]></category>
		<category><![CDATA[Spyware]]></category>

		<guid isPermaLink="false">http://www.411-spyware.com/?p=1657</guid>
		<description><![CDATA[<small><strong>BestAntivirusScan.com Threat Level:</strong></small> <img src="/images/post_level2.png" alt="BestAntivirusScan.com is a pest" style="margin-right: 10px; vertical-align: middle; border: 0;" />

<a href="http://www.411-spyware.com/images/BestAntivirusScan.com.gif" title="BestAntivirusScan.com screenshot" rel="lightbox"><img src="http://www.411-spyware.com/images/BestAntivirusScan.com.gif" class="alignleft" alt="BestAntivirusScan.com screenshot" longdesc="Click to zoom on BestAntivirusScan.com screenshot" /></a><strong>BestAntivirusScan.com</strong> is home to Antivirus 2009 Protect, AKA Antivirus 2009, one of many fake anti-spyware applications. 

BestAntivirusScan.com proudly boasts that Antivirus 2009 has 24/7 customer support. BestAntivirusScan.com neglects to mention that once you have paid $49.95-79.95 for Antivirus 2009, you will never hear from them again you'll continue to get false positives and fake security popups telling you to buy the "full" version. 

If you don't remember how you got to BestAntivirusScan.com, you're probably infected with Antivirus 2009. 

I'll show you how to block BestAntivirusScan.com and <a title="BestAntivirusScan.com " href="http://www.411-spyware.com/remove-antivirus2009">remove Antivirus2009 for free</a>.  ]]></description>
		<wfw:commentRss>http://www.411-spyware.com/bestantivirusscan-com-2/feed</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
	</channel>
</rss>
